Is 1Password – Password Manager safe?

Clean risk

Manages passwords and passkeys in the browser with a 1Password membership.

This extension generates, saves, and fills passwords for websites. It supports passkeys and protects saved passwords and other important information behind the one password the user knows. The store description says saved data is encrypted and that other information is used to provide service and support.

1Passwordv8.12.2.37Chrome Web Store
0Risk
Who publishes it

AgileBits Inc - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
1Password
Declared legal entity
AgileBits Inc
Registered address
4711 Yonge Street, 10th Floor, Toronto, ON M2N 6K8, CA
Registered contact
AgileBits Inc. dba 1Password

Same store account

2 other listings published from this account, 380k+ users between them, none of them carrying a finding.

Same operator - 1 listing

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 22 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

1password.community
Also called by 2 other listings
a.1passwordentusercontent.com
Also called by 2 other listings
a.1passwordusercontent.ca
Also called by 2 other listings
a.1passwordusercontent.com
Also called by 2 other listings
a.1passwordusercontent.eu
Also called by 2 other listings
api.kolide.com
Also called by 2 other listings
app.kolide.com
Also called by 2 other listings
assets1.kolide.com
Also called by 2 other listings
auth.kolide.com
Also called by 2 other listings
blog.1password.com
Also called by 2 other listings
cache.agilebits.com
Also called by 2 other listings
downloads.1password.com
Also called by 2 other listings, including 1Password: Password Manager
k2.kolide.com
Also called by 2 other listings, including 1Password: Password Manager
kolide.com
Also called by 2 other listings, including 1Password: Password Manager
op8.agilebits.com
Also called by 2 other listings
releases.1password.com
Also called by 2 other listings
start.1password.com
Also called by 2 other listings, including 1Password: Password Manager
app.trelica.com
Also called by 4 other listings
c.1password.com
Also called by 4 other listings, including StayFree
papaparse.com
Also called by 5 other listings, including Walcu Pro
staticcdn.duckduckgo.com
Also called by 5 other listings, including DuckDuckGo Search & Tracker Protection
the-guild.dev
Also called by 6 other listings, including Calendly

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed 1Password contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 1Password

    1Password sends data to 1Password. Named as a recipient by 2 other extensions we have analysed.

Updated 30 September 2026aeblfdkhhhdcdjpifhhbdiojplfjncoa